It's possible to recreate cookies with per-request values by setting change_id and one of the following keys in $env->{'psgix.session.options'}:
- path
- domain
- expires
- secure
- httponly
This is useful to implement things like a "Remember me" option, for example, so I think it should be documented.